Fix all CVEs in the Okteto CLI Docker image by scanning with Trivy and updating vulnerable dependencies and binaries
Upgrade the Go toolchain version of the Okteto CLI across both Go modules (root + tools), the Dockerfile base image (pinned by sha256), and the golang-ci CI image to a target version, validating with okteto build / okteto test, then opening a PR.
Record a lesson learned after a user correction, or review existing lessons at session start
Run pre-commit hooks and golangci-lint to verify code quality before finishing work
Start a new feature development session with branch setup and requirements gathering